fix(backend): bump lettere to prevent CRLF attack

NJUPT-NYR · Jun 6, 2021 · fe63879 · fe63879
1 parent 6afd1c5
commit fe63879
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/backend/Cargo.toml b/backend/Cargo.toml
@@ -45,7 +45,7 @@ futures = "0.3.13"
 hex = "*"
 jsonwebtoken = "7"
 lazy_static = "*"
-lettre = "0.10.0-alpha.4"
+lettre = ">=0.10.0-rc.3"
 pest = "*"
 pest_derive = "*"
 reqwest = {version = "0.10", features = ["json"]}

diff --git a/docs/CHANGELOG.md b/docs/CHANGELOG.md
@@ -1,14 +1,16 @@
 # CHANGELOG
 
 ## Unreleased
-new: auto configuration script `configure.py`
+new: auto configuration script `configure.py`.
 
 refine: No more need for initial rank configuration.
 
 refine: Add logger for tracker.
 
 fix: Possible inconsistent in passkey filter update.
 
+fix: possible CRLF attack in old `lettere` version.
+
 ## 0.2.0
 new: Split k-v storage and usage via `KVStorage` trait(default kv is `sled`).